---
features:
  - Add Lets Encrypt TLS certificate service integration into Openstack
    deployment. Enables trusted TLS certificate generation option for
    secure communcation with OpenStack HAProxy instances using
    ``letsencrypt_email``, ``kolla_internal_fqdn`` and/or
    ``kolla_external_fqdn`` is required. One container runs an Apache
    ACME client webserver and one runs Lego for certificate retrieval
    and renewal. The Lego container starts a cron job which attempts
    to renew certificates every 12 hours.